CVE-2011-1984: Undefined Security Weakness

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."...

PT-2011-3524

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Description The issue allows local users to gain privileges by sending crafted packets over the loopback...

Microsoft WINS - ECommEndDlg Input Validation Error (MS11-035/MS11-070)

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ MS WINS ECommEndDlg Input Validation Error 1. Advisory Information Title: MS WINS ECommEndDlg Input Validation Error Advisory ID: CORE-2011-0526 Advisory URL: http://www.coresecurity.com/content/ms-wins-ecommenddlg-input-validati...

MS WINS ECommEndDlg Input Validation Error

Core Security - Corelabs Advisory MS WINS ECommEndDlg Input Validation Error 1. Advisory Information Title: MS WINS ECommEndDlg Input Validation Error Advisory ID: CORE-2011-0526 Advisory URL: http://www.coresecurity.com/content/ms-wins-ecommenddlg-input-validation Date published: 2011-09-12 Date...

MS KB2616676: Fraudulent Digital Certificates Could Allow Spoofing (deprecated)

Due to the issuance of several fraudulent SSL certificates, the root certificates from the certificate authority DigiNotar have been placed in the Microsoft Untrusted Certificate Store. %NASLMINLEVEL 999999 @DEPRECATED@ C Tenable Network Security, Inc. include'compat.inc'; if description...

Microsoft Windows Server 2008 R1 - Local Denial of Service

Hi all. Here's a cute little local DoS attack against Windows Server 2008 R1, which will allow any user who can execute unprivileged code to BSoD your server with about three lines of C. I have reported this to Microsoft, but because of the limited scope of the issue - DoS-only, and server 2008 R...

CVE-2011-1263

Cross-site scripting XSS vulnerability in the logon page in Remote Desktop Web Access RD Web Access in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."...

CVE-2011-1965

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...

Denial of service

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...

CVE-2011-1965

CVE-2011-1965 corresponds to a denial-of-service vulnerability in the Windows TCP/IP stack (Tcpip.sys) where URL-based QoS handling could be abused to reboot the host. Affected products include Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1. The root cause is improper handling of UR...

CVE-2011-1975

The CVE-2011-1975 entry describes an Untrusted search path vulnerability in the Data Access Tracing component of Windows Data Access Components (MDAC) 6.0. A local attacker could gain privileges by placing a Trojan horse DLL in the current working directory, demonstrated via a crafted Excel (.xls...

CVE-2011-1263

The CVE describes a cross-site scripting (XSS) vulnerability in the logon page of Remote Desktop Web Access (RD Web Access) on Microsoft Windows Server 2008 R2 and R2 SP1. The issue arises from insufficient input sanitization in the login URI, allowing remote attackers to inject arbitrary HTML/ J...

Microsoft Windows TCP/IP QOS 远程拒绝服务漏洞(CVE-2011-1965)

Bugtraq ID: 48990 CVE ID：CVE-2011-1965 Microsoft Windows是一款流行的操作系统。 处理URLs时TCP/IP栈Tcpip.sys存在错误，通过构建特制URL，向提供基于URL QoS的网页内容服务系统提供恶意请求，可导致系统停止响应或重新启动 Microsoft Windows Server 2008 R2 x64 SP1 Microsoft Windows Server 2008 R2 x64 0 Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Serve...

PT-2011-3516

Name of the Vulnerable Software and Affected Versions Microsoft Windows Data Access Components Windows DAC 6.0 versions in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current worki...

CVE-2011-1965: Undefined Security Weakness

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service reboot via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."...

Microsoft Remote Desktop Web Access 跨站脚本漏洞

Bugtraq ID: 49040 CVE ID：CVE-2011-1263 Microsoft Windows是一款流行的操作系统。 传递给远程桌面WEB访问登录页面的部分输入在返回用户之前缺少过滤，这可导致跨站脚本攻击，可在目标用户浏览器上执行任意HTML和脚本代码。 Microsoft Windows Server 2008 R2 x64 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

PT-2011-3513 · Microsoft · Windows Vista Sp2 +5

Name of the Vulnerable Software and Affected Versions: Windows Vista SP2 Windows Server 2008 SP2 Windows Server 2008 R2 Windows Server 2008 R2 SP1 Windows 7 Gold Windows 7 SP1 Description: A denial of service issue exists due to improper parsing of file metadata by the kernel. This allows local...

CVE-2011-1871: Undefined Security Weakness

Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service reboot via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."...

CVE-2011-1975: Undefined Security Weakness

Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components Windows DAC 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...

CVE-2011-1263: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the logon page in Remote Desktop Web Access RD Web Access in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."...